Overview

overview

10

Static

static

3

940fe22290...18.exe

windows7-x64

10

940fe22290...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    940fe22290d7df77df6fb8a812f10a89_JaffaCakes118

  • Size

    1.8MB

  • Sample

    241124-mfkpes1nen

  • MD5

    940fe22290d7df77df6fb8a812f10a89

  • SHA1

    1f7f22375f5f4f65f51a610562557dc4cac58c69

  • SHA256

    c1c54c1b7341d1869e35fcf70ddb13e3d47420f5011e33646933bf76524163c0

  • SHA512

    9d16af324da0741ff0ae6dbdde6d08a1b9c119dfb5d64ec53e3c5f7bbd3ae2a013895c7ab0a551f23d78d8dd92b08ff70a62e2541ce3cb6aaa44843dfdcc3029

  • SSDEEP

    49152:xc+cQ1iqpeUPDzvSn6kJHveVaq7Ipitf:eIiqpe48bq

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      940fe22290d7df77df6fb8a812f10a89_JaffaCakes118

    • Size

      1.8MB

    • MD5

      940fe22290d7df77df6fb8a812f10a89

    • SHA1

      1f7f22375f5f4f65f51a610562557dc4cac58c69

    • SHA256

      c1c54c1b7341d1869e35fcf70ddb13e3d47420f5011e33646933bf76524163c0

    • SHA512

      9d16af324da0741ff0ae6dbdde6d08a1b9c119dfb5d64ec53e3c5f7bbd3ae2a013895c7ab0a551f23d78d8dd92b08ff70a62e2541ce3cb6aaa44843dfdcc3029

    • SSDEEP

      49152:xc+cQ1iqpeUPDzvSn6kJHveVaq7Ipitf:eIiqpe48bq

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks